@parlor/agent-host 0.0.0-stage → 0.2.0

package/dist/main.js

@@ -0,0 +1,520 @@
+#!/usr/bin/env node
+import { spawn } from "node:child_process";
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { defineCommand, runMain } from "citty";
+import { printable } from "./prompter.js";
+import { HOST_VERSION as version } from "./version.js";
+const KEYCHAIN_SERVICE = "dev.parlor.host";
+function shutdownSignal() {
+    const controller = new AbortController();
+    const stop = () => {
+        process.off("SIGINT", stop);
+        process.off("SIGTERM", stop);
+        controller.abort();
+    };
+    process.on("SIGINT", stop);
+    process.on("SIGTERM", stop);
+    return controller.signal;
+}
+const untilAborted = (signal) => new Promise((resolve) => {
+    if (signal.aborted)
+        resolve();
+    else
+        signal.addEventListener("abort", () => resolve(), { once: true });
+});
+const errorText = (error) => error instanceof Error ? error.message : String(error);
+function fail(message) {
+    process.stderr.write(`${printable(message)}\n`);
+    process.exitCode = 1;
+}
+async function host() {
+    const [{ acpLauncher }, { HOST_PROTOCOL }, { CONTROL_PROTOCOL, connectControl }, { createHostDaemon, HostAlreadyRunning }, { fileGrantStore, keychainHostKeys }, { LOCK_TOKEN_ENV }, { createMcpProxy }, { hostPaths }, { changePolicy, DEFAULT_POLICY, loadPolicy }, { createSessionPool }, { macDialogPrompter, terminalPrompter }, { revokeGrant }, { fileTrustStore }, { ensureService },] = await Promise.all([
+        import("./acp.js"),
+        import("@parlor/chat"),
+        import("./control.js"),
+        import("./daemon.js"),
+        import("./grants.js"),
+        import("./lock.js"),
+        import("./mcp-proxy.js"),
+        import("./paths.js"),
+        import("./policy.js"),
+        import("./pool.js"),
+        import("./prompter.js"),
+        import("./revoke.js"),
+        import("./trust.js"),
+        import("./service.js"),
+    ]);
+    const release = {
+        version,
+        protocols: { min: 1, max: HOST_PROTOCOL },
+        control: CONTROL_PROTOCOL,
+    };
+    const daemonFor = (paths, grants, prompter) => createHostDaemon({
+        release,
+        paths,
+        grants,
+        keys: keychainHostKeys(KEYCHAIN_SERVICE),
+        trust: fileTrustStore(paths.trust),
+        pool: createSessionPool(paths.sessions),
+        proxy: createMcpProxy("parlor-host"),
+        launcher: acpLauncher(),
+        prompter,
+        policy: DEFAULT_POLICY,
+        lockToken: process.env[LOCK_TOKEN_ENV],
+    });
+    const disconnectFrom = async (origin) => {
+        const paths = hostPaths();
+        const client = await connectControl(paths.control);
+        if (client) {
+            const reply = await client.send({ op: "disconnect", appOrigin: origin });
+            client.close();
+            if (!reply.ok)
+                throw new Error(reply.error);
+            return;
+        }
+        const grants = fileGrantStore(paths.grants);
+        const grant = await grants.get(origin);
+        if (!grant)
+            throw new Error(`This computer is not connected to ${origin}.`);
+        const keys = keychainHostKeys(KEYCHAIN_SERVICE);
+        await revokeGrant({
+            appOrigin: origin,
+            appName: grant.appName,
+            assert: (request) => keys.assert(origin, request),
+        });
+        await grants.remove(origin);
+        await keys.remove(origin);
+        await fileTrustStore(paths.trust).forget(origin);
+    };
+    return {
+        changePolicy,
+        connectControl,
+        DEFAULT_POLICY,
+        daemonFor,
+        disconnectFrom,
+        ensureService,
+        fileGrantStore,
+        HostAlreadyRunning,
+        fileTrustStore,
+        hostPaths,
+        keychainHostKeys,
+        loadPolicy,
+        macDialogPrompter,
+        release,
+        terminalPrompter,
+    };
+}
+const link = defineCommand({
+    meta: {
+        name: "link",
+        description: "Link a device showing a link code to this computer's agents",
+    },
+    args: {
+        url: { type: "positional", required: true, description: "The app's URL" },
+        code: {
+            type: "positional",
+            required: true,
+            description: "The code the device shows",
+        },
+    },
+    async run({ args }) {
+        const { unsupportedHostPlatform } = await import("./naming.js");
+        const unsupported = unsupportedHostPlatform();
+        if (unsupported) {
+            fail(unsupported);
+            return;
+        }
+        const [kit, { linkDevice }, { askYesNo }, { computerName }] = await Promise.all([
+            host(),
+            import("./link-device.js"),
+            import("./prompter.js"),
+            import("./naming.js"),
+        ]);
+        const origin = new URL(args.url).origin;
+        const paths = kit.hostPaths();
+        const grant = await kit.fileGrantStore(paths.grants).get(origin);
+        if (!grant || grant.declined) {
+            fail(`This computer is not connected to ${origin}. Run \`npx @parlor/agent-host connect ${origin}\` first.`);
+            return;
+        }
+        const keys = kit.keychainHostKeys(KEYCHAIN_SERVICE);
+        let outcome;
+        try {
+            outcome = await linkDevice({
+                appOrigin: origin,
+                code: args.code,
+                assert: (request) => keys.assert(origin, request),
+                trust: kit.fileTrustStore(paths.trust),
+                confirm: (device) => askYesNo(`Link ${device.name} to your agents on ${computerName()} for ${grant.appName} as ${grant.account.email ?? grant.account.name}?`),
+            });
+        }
+        catch (error) {
+            fail(errorText(error));
+            return;
+        }
+        if (!outcome.linked) {
+            fail("Not linked.");
+            return;
+        }
+        const client = await kit.connectControl(paths.control);
+        if (client) {
+            await client.send({ op: "connect", appOrigin: origin });
+            client.close();
+        }
+        process.stdout.write(`Linked ${printable(outcome.device.name)}. It can use your agents now.\n`);
+    },
+});
+const devices = defineCommand({
+    meta: {
+        name: "devices",
+        description: "List the devices that can use this computer's agents, or remove one",
+    },
+    args: {
+        url: { type: "positional", required: true, description: "The app's URL" },
+        remove: { type: "string", description: "The id of a device to remove" },
+    },
+    async run({ args }) {
+        const [kit, { describeDevices, removeDevice }] = await Promise.all([
+            host(),
+            import("./device-list.js"),
+        ]);
+        const origin = new URL(args.url).origin;
+        const paths = kit.hostPaths();
+        const grant = await kit.fileGrantStore(paths.grants).get(origin);
+        if (!grant || grant.declined) {
+            fail(`This computer is not connected to ${origin}.`);
+            return;
+        }
+        const trust = kit.fileTrustStore(paths.trust);
+        if (!args.remove) {
+            process.stdout.write(describeDevices(grant.appName, await trust.list(origin)));
+            return;
+        }
+        let removed;
+        try {
+            removed = await removeDevice(trust, origin, args.remove);
+        }
+        catch (error) {
+            fail(errorText(error));
+            return;
+        }
+        const client = await kit.connectControl(paths.control);
+        if (client) {
+            await client.send({ op: "connect", appOrigin: origin });
+            client.close();
+        }
+        process.stdout.write(`Removed ${printable(removed.name)}. It must be linked again to use your agents here.\n`);
+    },
+});
+const connect = defineCommand({
+    meta: { name: "connect", description: "Connect this computer to a Parlor app" },
+    args: { url: { type: "positional", required: true, description: "The app's URL" } },
+    async run({ args }) {
+        const [kit, { pair, UnrevokedGrant }, { computerName, platformName, unsupportedHostPlatform },] = await Promise.all([host(), import("./pairing.js"), import("./naming.js")]);
+        const unsupported = unsupportedHostPlatform();
+        if (unsupported) {
+            fail(unsupported);
+            return;
+        }
+        const origin = new URL(args.url).origin;
+        const paths = kit.hostPaths();
+        const grants = kit.fileGrantStore(paths.grants);
+        let grant = await grants.get(origin);
+        const alreadyConnected = grant !== undefined && !grant.declined;
+        if (grant?.declined) {
+            try {
+                await kit.disconnectFrom(origin);
+            }
+            catch (error) {
+                fail(errorText(error));
+                return;
+            }
+            grant = undefined;
+        }
+        if (!grant) {
+            let outcome;
+            try {
+                outcome = await pair({
+                    appOrigin: origin,
+                    hostName: computerName(),
+                    platform: platformName(),
+                    keys: kit.keychainHostKeys(KEYCHAIN_SERVICE),
+                    workspaceRoot: paths.workspaces,
+                    channel: {
+                        kind: "browser",
+                        open: async (url) => {
+                            process.stdout.write(`Approve the connection in your browser. If it did not open, visit:\n${url}\n`);
+                            spawn("open", [url], { stdio: "ignore", detached: true })
+                                .on("error", () => undefined)
+                                .unref();
+                        },
+                    },
+                });
+            }
+            catch (error) {
+                if (!(error instanceof UnrevokedGrant))
+                    throw error;
+                await grants.save(error.grant);
+                fail(`${error.message} Run \`parlor-host disconnect ${origin}\` to try again.`);
+                return;
+            }
+            if (!outcome.paired) {
+                const why = {
+                    declined_locally: "You did not confirm the connection.",
+                    declined_in_app: "The connection was cancelled in the browser.",
+                    timeout: "The connection was not approved within 10 minutes.",
+                }[outcome.reason];
+                fail(`Not connected. ${why}`);
+                return;
+            }
+            grant = outcome.grant;
+            await grants.save(grant);
+        }
+        const adopted = await kit.ensureService(paths, {
+            kind: "cli",
+            release: kit.release,
+        });
+        if (adopted.kind === "refused") {
+            fail("An older Parlor Host is already running on this computer; stop it, then connect again.");
+            return;
+        }
+        const client = await kit.connectControl(paths.control);
+        if (!client) {
+            fail("Parlor Host stopped answering.");
+            return;
+        }
+        const reply = await client.send({ op: "connect", appOrigin: origin });
+        client.close();
+        if (!reply.ok) {
+            fail(reply.error);
+            return;
+        }
+        process.stdout.write(`Connected to ${printable(grant.appName)} as ${printable(grant.account.email ?? grant.account.name)}. Your agents are ready in its sidebar.\nNot you? Run \`npx @parlor/agent-host disconnect ${origin}\`.\n`);
+        if (alreadyConnected) {
+            process.stdout.write("This computer was already connected. To use your agents from another browser or device, open the Agent sidebar there and link it.\n");
+        }
+    },
+});
+const disconnect = defineCommand({
+    meta: { name: "disconnect", description: "Disconnect this computer from a Parlor app" },
+    args: { url: { type: "positional", required: true, description: "The app's URL" } },
+    async run({ args }) {
+        const kit = await host();
+        await kit
+            .disconnectFrom(new URL(args.url).origin)
+            .catch((error) => fail(errorText(error)));
+    },
+});
+const status = defineCommand({
+    meta: { name: "status", description: "Show the apps this computer serves" },
+    args: { json: { type: "boolean", description: "Print one JSON line" } },
+    async run({ args }) {
+        const kit = await host();
+        const client = await kit.connectControl(kit.hostPaths().control);
+        const reply = client ? await client.send({ op: "status" }) : undefined;
+        client?.close();
+        const current = reply?.ok
+            ? { ...reply.status, grants: reply.grants }
+            : { state: "stopped" };
+        if (args.json) {
+            process.stdout.write(`${JSON.stringify(current)}\n`);
+        }
+        else if (current.state === "stopped") {
+            process.stdout.write("Parlor Host is not running.\n");
+        }
+        else {
+            const apps = current.apps.map((app) => `  ${app}`).join("\n");
+            process.stdout.write(`Parlor Host ${current.version} is serving:\n${apps || "  no app yet"}\n`);
+        }
+    },
+});
+const daemon = defineCommand({
+    meta: {
+        name: "daemon",
+        description: "Run the background host for every connected app",
+    },
+    args: {
+        ensure: {
+            type: "boolean",
+            description: "Adopt, install or upgrade the per-user service, print one JSON line, exit",
+        },
+        app: { type: "string", description: "With --ensure: the app's bundle id" },
+        binary: { type: "string", description: "With --ensure: the bundled parlor-host" },
+        signature: { type: "string", description: "With --ensure: its parlor-host.sig" },
+    },
+    async run({ args }) {
+        const kit = await host();
+        const paths = kit.hostPaths();
+        if (args.ensure) {
+            if (!args.app || !args.binary || !args.signature) {
+                fail("--ensure needs --app, --binary and --signature.");
+                return;
+            }
+            const started = performance.now();
+            const outcome = await kit.ensureService(paths, {
+                kind: "desktop-sidecar",
+                app: args.app,
+                release: kit.release,
+                binary: args.binary,
+                signature: args.signature,
+            });
+            process.stdout.write(`${JSON.stringify({
+                event: "ensure",
+                outcome: outcome.kind,
+                ms: Math.round(performance.now() - started),
+                ...(outcome.kind === "refused" ? { reason: outcome.reason } : {}),
+            })}\n`);
+            return;
+        }
+        const shutdown = shutdownSignal();
+        const running = kit.daemonFor(paths, kit.fileGrantStore(paths.grants), process.platform === "darwin" ? kit.macDialogPrompter() : kit.terminalPrompter());
+        try {
+            await running.start();
+        }
+        catch (error) {
+            if (error instanceof kit.HostAlreadyRunning)
+                process.exit(0);
+            throw error;
+        }
+        const handedOver = running.drained.then(() => true);
+        if (await Promise.race([handedOver, untilAborted(shutdown).then(() => false)])) {
+            process.exit(0);
+        }
+        await running.stop();
+        process.exit(0);
+    },
+});
+const config = defineCommand({
+    meta: {
+        name: "config",
+        description: "Show or set what this computer enforces on remote turns",
+    },
+    args: {
+        answers: {
+            type: "string",
+            description: "Where an agent's permission prompts are answered: presence or computer",
+        },
+        "prompt-presence": {
+            type: "string",
+            description: "Hours a linked device sends before it confirms with Face ID or Touch ID again, or off",
+        },
+    },
+    async run({ args }) {
+        const kit = await host();
+        const { policy } = kit.hostPaths();
+        let change = {};
+        const { answers } = args;
+        if (answers !== undefined) {
+            if (answers !== "presence" && answers !== "computer") {
+                fail("--answers takes presence or computer.");
+                return;
+            }
+            change = { ...change, answers };
+        }
+        const hours = args["prompt-presence"];
+        if (hours !== undefined) {
+            const maxAgeHours = Number(hours);
+            if (hours !== "off" && !(Number.isFinite(maxAgeHours) && maxAgeHours > 0)) {
+                fail("--prompt-presence takes a number of hours or off.");
+                return;
+            }
+            change = { ...change, promptPresence: hours === "off" ? "off" : { maxAgeHours } };
+        }
+        const current = Object.keys(change).length === 0
+            ? await kit.loadPolicy(policy, kit.DEFAULT_POLICY)
+            : await kit.changePolicy(policy, kit.DEFAULT_POLICY, change);
+        process.stdout.write(`${JSON.stringify(current)}\n`);
+    },
+});
+const dev = defineCommand({
+    meta: { name: "dev", description: "Serve a local `parlor dev` server" },
+    args: {
+        app: { type: "string", required: true, description: "http://localhost:<port>" },
+    },
+    async run({ args }) {
+        const [kit, { NoDevAuth, requestDevHostToken }] = await Promise.all([
+            host(),
+            import("./dev-host.js"),
+        ]);
+        const origin = new URL(args.app).origin;
+        const shutdown = shutdownSignal();
+        const stopped = untilAborted(shutdown);
+        let hostToken;
+        try {
+            hostToken = await requestDevHostToken(origin, shutdown);
+        }
+        catch (error) {
+            if (shutdown.aborted)
+                process.exit();
+            if (!(error instanceof NoDevAuth))
+                throw error;
+            process.stdout.write("Parlor Host: this app signs people in itself; connect this computer from its sidebar.\n");
+            return;
+        }
+        const home = kit.hostPaths();
+        const shared = await kit.connectControl(home.control);
+        if (shared) {
+            const reply = await shared.send({ op: "dev_attach", appOrigin: origin, hostToken });
+            if (!reply.ok)
+                fail(reply.error);
+            await stopped;
+            await shared.send({ op: "dev_detach", appOrigin: origin });
+            shared.close();
+            process.exit();
+        }
+        const root = await mkdtemp(join(tmpdir(), "parlor-host-dev-"));
+        const paths = {
+            ...kit.hostPaths(root),
+            agents: home.agents,
+            workspaces: home.workspaces,
+        };
+        const own = kit.daemonFor(paths, memoryGrants(), kit.terminalPrompter());
+        await own.start();
+        const client = await kit.connectControl(paths.control);
+        const reply = await client.send({ op: "dev_attach", appOrigin: origin, hostToken });
+        client.close();
+        if (!reply.ok)
+            fail(reply.error);
+        await stopped;
+        await own.stop();
+        await rm(root, { recursive: true, force: true });
+        process.exit();
+    },
+});
+function memoryGrants() {
+    const grants = new Map();
+    return {
+        list: async () => [...grants.values()],
+        get: async (appOrigin) => grants.get(appOrigin),
+        save: async (grant) => void grants.set(grant.appOrigin, grant),
+        remove: async (appOrigin) => void grants.delete(appOrigin),
+    };
+}
+const mcpProxy = defineCommand({
+    meta: { name: "mcp-proxy", description: "Internal: an agent's stdio MCP server" },
+    async run() {
+        const { runMcpProxyProcess } = await import("./mcp-proxy.js");
+        await runMcpProxyProcess(process.env);
+    },
+});
+void runMain(defineCommand({
+    meta: {
+        name: "parlor-host",
+        version,
+        description: "Run your own agents for your Parlor apps",
+    },
+    subCommands: {
+        connect,
+        link,
+        devices,
+        disconnect,
+        status,
+        daemon,
+        config,
+        dev,
+        "mcp-proxy": mcpProxy,
+    },
+}));
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAI/C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C,SAAS,cAAc;IACrB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7B,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,MAAmB,EAAE,EAAE,CAC3C,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;IAC5B,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;;QACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEL,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CACnC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEzD,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CACJ,EAAE,WAAW,EAAE,EACf,EAAE,aAAa,EAAE,EACjB,EAAE,gBAAgB,EAAE,cAAc,EAAE,EACpC,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,EACxC,EAAE,cAAc,EAAE,gBAAgB,EAAE,EACpC,EAAE,cAAc,EAAE,EAClB,EAAE,cAAc,EAAE,EAClB,EAAE,SAAS,EAAE,EACb,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,EAC5C,EAAE,iBAAiB,EAAE,EACrB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EACvC,EAAE,WAAW,EAAE,EACf,EAAE,cAAc,EAAE,EAClB,EAAE,aAAa,EAAE,EAClB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,UAAU,CAAC;QAClB,MAAM,CAAC,cAAc,CAAC;QACtB,MAAM,CAAC,cAAc,CAAC;QACtB,MAAM,CAAC,aAAa,CAAC;QACrB,MAAM,CAAC,aAAa,CAAC;QACrB,MAAM,CAAC,WAAW,CAAC;QACnB,MAAM,CAAC,gBAAgB,CAAC;QACxB,MAAM,CAAC,YAAY,CAAC;QACpB,MAAM,CAAC,aAAa,CAAC;QACrB,MAAM,CAAC,WAAW,CAAC;QACnB,MAAM,CAAC,eAAe,CAAC;QACvB,MAAM,CAAC,aAAa,CAAC;QACrB,MAAM,CAAC,YAAY,CAAC;QACpB,MAAM,CAAC,cAAc,CAAC;KACvB,CAAC,CAAC;IAIH,MAAM,OAAO,GAAG;QACd,OAAO;QACP,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE;QACzC,OAAO,EAAE,gBAAgB;KAC1B,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,KAAY,EAAE,MAAc,EAAE,QAAkB,EAAE,EAAE,CACrE,gBAAgB,CAAC;QACf,OAAO;QACP,KAAK;QACL,MAAM;QACN,IAAI,EAAE,gBAAgB,CAAC,gBAAgB,CAAC;QACxC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;QAClC,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvC,KAAK,EAAE,cAAc,CAAC,aAAa,CAAC;QACpC,QAAQ,EAAE,WAAW,EAAE;QACvB,QAAQ;QACR,MAAM,EAAE,cAAc;QACtB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;KACvC,CAAC,CAAC;IACL,MAAM,cAAc,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,GAAG,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,WAAW,CAAC;YAChB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,OAAO;QACL,YAAY;QACZ,cAAc;QACd,cAAc;QACd,SAAS;QACT,cAAc;QACd,aAAa;QACb,cAAc;QACd,kBAAkB;QAClB,cAAc;QACd,SAAS;QACT,gBAAgB;QAChB,UAAU;QACV,iBAAiB;QACjB,OAAO;QACP,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,aAAa,CAAC;IACzB,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,6DAA6D;KAC3E;IACD,IAAI,EAAE;QACJ,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE;QACzE,IAAI,EAAE;YACJ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,2BAA2B;SACzC;KACF;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9E,IAAI,EAAE;YACN,MAAM,CAAC,kBAAkB,CAAC;YAC1B,MAAM,CAAC,eAAe,CAAC;YACvB,MAAM,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CACF,qCAAqC,MAAM,0CAA0C,MAAM,WAAW,CACvG,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,OAA+C,CAAC;QACpD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAC;gBACzB,SAAS,EAAE,MAAM;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBACjD,KAAK,EAAE,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;gBACtC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAClB,QAAQ,CACN,QAAQ,MAAM,CAAC,IAAI,sBAAsB,YAAY,EAAE,QAAQ,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAChI;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,aAAa,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAC1E,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,aAAa,CAAC;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,qEAAqE;KACnF;IACD,IAAI,EAAE;QACJ,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE;QACzE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;KACxE;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,IAAI,EAAE;YACN,MAAM,CAAC,kBAAkB,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,qCAAqC,MAAM,GAAG,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QACD,IAAI,OAAiD,CAAC;QACtD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,sDAAsD,CACzF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,aAAa,CAAC;IAC5B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,uCAAuC,EAAE;IAC/E,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE;IACnF,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,CACJ,GAAG,EACH,EAAE,IAAI,EAAE,cAAc,EAAE,EACxB,EAAE,YAAY,EAAE,YAAY,EAAE,uBAAuB,EAAE,EACxD,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,gBAAgB,GAAG,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChE,IAAI,KAAK,EAAE,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,OAAyC,CAAC;YAC9C,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC;oBACnB,SAAS,EAAE,MAAM;oBACjB,QAAQ,EAAE,YAAY,EAAE;oBACxB,QAAQ,EAAE,YAAY,EAAE;oBACxB,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;oBAC5C,aAAa,EAAE,KAAK,CAAC,UAAU;oBAC/B,OAAO,EAAE;wBACP,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE,GAAG,IAAI,CAC/E,CAAC;4BACF,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;iCACtD,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC;iCAC5B,KAAK,EAAE,CAAC;wBACb,CAAC;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,cAAc,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACpD,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,iCAAiC,MAAM,kBAAkB,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG;oBACV,gBAAgB,EAAE,qCAAqC;oBACvD,eAAe,EAAE,8CAA8C;oBAC/D,OAAO,EAAE,oDAAoD;iBAC9D,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YACtB,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE;YAC7C,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CACF,wFAAwF,CACzF,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,6FAA6F,MAAM,OAAO,CAC9M,CAAC;QACF,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qIAAqI,CACtI,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,aAAa,CAAC;IAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,4CAA4C,EAAE;IACvF,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE;IACnF,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACzB,MAAM,GAAG;aACN,cAAc,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;aACxC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,aAAa,CAAC;IAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;IAC3E,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE,EAAE;IACvE,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,EAAE,EAAE;YACvB,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;YAC3C,CAAC,CAAE,EAAE,KAAK,EAAE,SAAS,EAAY,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,OAAO,CAAC,OAAO,iBAAiB,IAAI,IAAI,cAAc,IAAI,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,aAAa,CAAC;IAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,iDAAiD;KAC/D;IACD,IAAI,EAAE;QACJ,MAAM,EAAE;YACN,IAAI,EAAE,SAAS;YACf,WAAW,EACT,2EAA2E;SAC9E;QACD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;QAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE;QACjF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;KACjF;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjD,IAAI,CAAC,iDAAiD,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE;gBAC7C,IAAI,EAAE,iBAAiB;gBACvB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;gBAC3C,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE,CAAC,IAAI,CACP,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAC3B,KAAK,EACL,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAChC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CACjF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,GAAG,CAAC,kBAAkB;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7D,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,aAAa,CAAC;IAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yDAAyD;KACvE;IACD,IAAI,EAAE;QACJ,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,wEAAwE;SAC3E;QACD,iBAAiB,EAAE;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,uFAAuF;SAC1F;KACF;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACzB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,MAAM,GAA0B,EAAE,CAAC;QACvC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;gBACrD,IAAI,CAAC,uCAAuC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,mDAAmD,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;QACpF,CAAC;QACD,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAC9B,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC;YAClD,CAAC,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,aAAa,CAAC;IACxB,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,mCAAmC,EAAE;IACvE,IAAI,EAAE;QACJ,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;KAChF;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClE,IAAI,EAAE;YACN,MAAM,CAAC,eAAe,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,OAAO;gBAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yFAAyF,CAC1F,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,OAAO,CAAC;YACd,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG;YACZ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,MAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACrF,MAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,OAAO,CAAC;QACd,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC;CACF,CAAC,CAAC;AAEH,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACtC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/C,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;QAC9D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,aAAa,CAAC;IAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,uCAAuC,EAAE;IACjF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;CACF,CAAC,CAAC;AAEH,KAAK,OAAO,CACV,aAAa,CAAC;IACZ,IAAI,EAAE;QACJ,IAAI,EAAE,aAAa;QACnB,OAAO;QACP,WAAW,EAAE,0CAA0C;KACxD;IACD,WAAW,EAAE;QACX,OAAO;QACP,IAAI;QACJ,OAAO;QACP,UAAU;QACV,MAAM;QACN,MAAM;QACN,MAAM;QACN,GAAG;QACH,WAAW,EAAE,QAAQ;KACtB;CACF,CAAC,CACH,CAAC","sourcesContent":["#!/usr/bin/env node\nimport { spawn } from \"node:child_process\";\nimport { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { defineCommand, runMain } from \"citty\";\n\nimport type { AppGrant, GrantStore } from \"./grants.js\";\nimport type { RemotePolicy } from \"./policy.js\";\nimport { printable } from \"./prompter.js\";\nimport { HOST_VERSION as version } from \"./version.js\";\n\nconst KEYCHAIN_SERVICE = \"dev.parlor.host\";\n\nfunction shutdownSignal(): AbortSignal {\n  const controller = new AbortController();\n  const stop = () => {\n    process.off(\"SIGINT\", stop);\n    process.off(\"SIGTERM\", stop);\n    controller.abort();\n  };\n  process.on(\"SIGINT\", stop);\n  process.on(\"SIGTERM\", stop);\n  return controller.signal;\n}\n\nconst untilAborted = (signal: AbortSignal) =>\n  new Promise<void>((resolve) => {\n    if (signal.aborted) resolve();\n    else signal.addEventListener(\"abort\", () => resolve(), { once: true });\n  });\n\nconst errorText = (error: unknown) =>\n  error instanceof Error ? error.message : String(error);\n\nfunction fail(message: string): void {\n  process.stderr.write(`${printable(message)}\\n`);\n  process.exitCode = 1;\n}\n\nasync function host() {\n  const [\n    { acpLauncher },\n    { HOST_PROTOCOL },\n    { CONTROL_PROTOCOL, connectControl },\n    { createHostDaemon, HostAlreadyRunning },\n    { fileGrantStore, keychainHostKeys },\n    { LOCK_TOKEN_ENV },\n    { createMcpProxy },\n    { hostPaths },\n    { changePolicy, DEFAULT_POLICY, loadPolicy },\n    { createSessionPool },\n    { macDialogPrompter, terminalPrompter },\n    { revokeGrant },\n    { fileTrustStore },\n    { ensureService },\n  ] = await Promise.all([\n    import(\"./acp.js\"),\n    import(\"@parlor/chat\"),\n    import(\"./control.js\"),\n    import(\"./daemon.js\"),\n    import(\"./grants.js\"),\n    import(\"./lock.js\"),\n    import(\"./mcp-proxy.js\"),\n    import(\"./paths.js\"),\n    import(\"./policy.js\"),\n    import(\"./pool.js\"),\n    import(\"./prompter.js\"),\n    import(\"./revoke.js\"),\n    import(\"./trust.js\"),\n    import(\"./service.js\"),\n  ]);\n  type Paths = ReturnType<typeof hostPaths>;\n  type Grants = ReturnType<typeof fileGrantStore>;\n  type Prompter = ReturnType<typeof terminalPrompter>;\n  const release = {\n    version,\n    protocols: { min: 1, max: HOST_PROTOCOL },\n    control: CONTROL_PROTOCOL,\n  };\n  const daemonFor = (paths: Paths, grants: Grants, prompter: Prompter) =>\n    createHostDaemon({\n      release,\n      paths,\n      grants,\n      keys: keychainHostKeys(KEYCHAIN_SERVICE),\n      trust: fileTrustStore(paths.trust),\n      pool: createSessionPool(paths.sessions),\n      proxy: createMcpProxy(\"parlor-host\"),\n      launcher: acpLauncher(),\n      prompter,\n      policy: DEFAULT_POLICY,\n      lockToken: process.env[LOCK_TOKEN_ENV],\n    });\n  const disconnectFrom = async (origin: string) => {\n    const paths = hostPaths();\n    const client = await connectControl(paths.control);\n    if (client) {\n      const reply = await client.send({ op: \"disconnect\", appOrigin: origin });\n      client.close();\n      if (!reply.ok) throw new Error(reply.error);\n      return;\n    }\n    const grants = fileGrantStore(paths.grants);\n    const grant = await grants.get(origin);\n    if (!grant) throw new Error(`This computer is not connected to ${origin}.`);\n    const keys = keychainHostKeys(KEYCHAIN_SERVICE);\n    await revokeGrant({\n      appOrigin: origin,\n      appName: grant.appName,\n      assert: (request) => keys.assert(origin, request),\n    });\n    await grants.remove(origin);\n    await keys.remove(origin);\n    await fileTrustStore(paths.trust).forget(origin);\n  };\n  return {\n    changePolicy,\n    connectControl,\n    DEFAULT_POLICY,\n    daemonFor,\n    disconnectFrom,\n    ensureService,\n    fileGrantStore,\n    HostAlreadyRunning,\n    fileTrustStore,\n    hostPaths,\n    keychainHostKeys,\n    loadPolicy,\n    macDialogPrompter,\n    release,\n    terminalPrompter,\n  };\n}\n\nconst link = defineCommand({\n  meta: {\n    name: \"link\",\n    description: \"Link a device showing a link code to this computer's agents\",\n  },\n  args: {\n    url: { type: \"positional\", required: true, description: \"The app's URL\" },\n    code: {\n      type: \"positional\",\n      required: true,\n      description: \"The code the device shows\",\n    },\n  },\n  async run({ args }) {\n    const { unsupportedHostPlatform } = await import(\"./naming.js\");\n    const unsupported = unsupportedHostPlatform();\n    if (unsupported) {\n      fail(unsupported);\n      return;\n    }\n    const [kit, { linkDevice }, { askYesNo }, { computerName }] = await Promise.all([\n      host(),\n      import(\"./link-device.js\"),\n      import(\"./prompter.js\"),\n      import(\"./naming.js\"),\n    ]);\n    const origin = new URL(args.url).origin;\n    const paths = kit.hostPaths();\n    const grant = await kit.fileGrantStore(paths.grants).get(origin);\n    if (!grant || grant.declined) {\n      fail(\n        `This computer is not connected to ${origin}. Run \\`npx @parlor/agent-host connect ${origin}\\` first.`,\n      );\n      return;\n    }\n    const keys = kit.keychainHostKeys(KEYCHAIN_SERVICE);\n    let outcome: Awaited<ReturnType<typeof linkDevice>>;\n    try {\n      outcome = await linkDevice({\n        appOrigin: origin,\n        code: args.code,\n        assert: (request) => keys.assert(origin, request),\n        trust: kit.fileTrustStore(paths.trust),\n        confirm: (device) =>\n          askYesNo(\n            `Link ${device.name} to your agents on ${computerName()} for ${grant.appName} as ${grant.account.email ?? grant.account.name}?`,\n          ),\n      });\n    } catch (error) {\n      fail(errorText(error));\n      return;\n    }\n    if (!outcome.linked) {\n      fail(\"Not linked.\");\n      return;\n    }\n    const client = await kit.connectControl(paths.control);\n    if (client) {\n      await client.send({ op: \"connect\", appOrigin: origin });\n      client.close();\n    }\n    process.stdout.write(\n      `Linked ${printable(outcome.device.name)}. It can use your agents now.\\n`,\n    );\n  },\n});\n\nconst devices = defineCommand({\n  meta: {\n    name: \"devices\",\n    description: \"List the devices that can use this computer's agents, or remove one\",\n  },\n  args: {\n    url: { type: \"positional\", required: true, description: \"The app's URL\" },\n    remove: { type: \"string\", description: \"The id of a device to remove\" },\n  },\n  async run({ args }) {\n    const [kit, { describeDevices, removeDevice }] = await Promise.all([\n      host(),\n      import(\"./device-list.js\"),\n    ]);\n    const origin = new URL(args.url).origin;\n    const paths = kit.hostPaths();\n    const grant = await kit.fileGrantStore(paths.grants).get(origin);\n    if (!grant || grant.declined) {\n      fail(`This computer is not connected to ${origin}.`);\n      return;\n    }\n    const trust = kit.fileTrustStore(paths.trust);\n    if (!args.remove) {\n      process.stdout.write(describeDevices(grant.appName, await trust.list(origin)));\n      return;\n    }\n    let removed: Awaited<ReturnType<typeof removeDevice>>;\n    try {\n      removed = await removeDevice(trust, origin, args.remove);\n    } catch (error) {\n      fail(errorText(error));\n      return;\n    }\n    const client = await kit.connectControl(paths.control);\n    if (client) {\n      await client.send({ op: \"connect\", appOrigin: origin });\n      client.close();\n    }\n    process.stdout.write(\n      `Removed ${printable(removed.name)}. It must be linked again to use your agents here.\\n`,\n    );\n  },\n});\n\nconst connect = defineCommand({\n  meta: { name: \"connect\", description: \"Connect this computer to a Parlor app\" },\n  args: { url: { type: \"positional\", required: true, description: \"The app's URL\" } },\n  async run({ args }) {\n    const [\n      kit,\n      { pair, UnrevokedGrant },\n      { computerName, platformName, unsupportedHostPlatform },\n    ] = await Promise.all([host(), import(\"./pairing.js\"), import(\"./naming.js\")]);\n    const unsupported = unsupportedHostPlatform();\n    if (unsupported) {\n      fail(unsupported);\n      return;\n    }\n    const origin = new URL(args.url).origin;\n    const paths = kit.hostPaths();\n    const grants = kit.fileGrantStore(paths.grants);\n    let grant = await grants.get(origin);\n    const alreadyConnected = grant !== undefined && !grant.declined;\n    if (grant?.declined) {\n      try {\n        await kit.disconnectFrom(origin);\n      } catch (error) {\n        fail(errorText(error));\n        return;\n      }\n      grant = undefined;\n    }\n    if (!grant) {\n      let outcome: Awaited<ReturnType<typeof pair>>;\n      try {\n        outcome = await pair({\n          appOrigin: origin,\n          hostName: computerName(),\n          platform: platformName(),\n          keys: kit.keychainHostKeys(KEYCHAIN_SERVICE),\n          workspaceRoot: paths.workspaces,\n          channel: {\n            kind: \"browser\",\n            open: async (url) => {\n              process.stdout.write(\n                `Approve the connection in your browser. If it did not open, visit:\\n${url}\\n`,\n              );\n              spawn(\"open\", [url], { stdio: \"ignore\", detached: true })\n                .on(\"error\", () => undefined)\n                .unref();\n            },\n          },\n        });\n      } catch (error) {\n        if (!(error instanceof UnrevokedGrant)) throw error;\n        await grants.save(error.grant);\n        fail(`${error.message} Run \\`parlor-host disconnect ${origin}\\` to try again.`);\n        return;\n      }\n      if (!outcome.paired) {\n        const why = {\n          declined_locally: \"You did not confirm the connection.\",\n          declined_in_app: \"The connection was cancelled in the browser.\",\n          timeout: \"The connection was not approved within 10 minutes.\",\n        }[outcome.reason];\n        fail(`Not connected. ${why}`);\n        return;\n      }\n      grant = outcome.grant;\n      await grants.save(grant);\n    }\n    const adopted = await kit.ensureService(paths, {\n      kind: \"cli\",\n      release: kit.release,\n    });\n    if (adopted.kind === \"refused\") {\n      fail(\n        \"An older Parlor Host is already running on this computer; stop it, then connect again.\",\n      );\n      return;\n    }\n    const client = await kit.connectControl(paths.control);\n    if (!client) {\n      fail(\"Parlor Host stopped answering.\");\n      return;\n    }\n    const reply = await client.send({ op: \"connect\", appOrigin: origin });\n    client.close();\n    if (!reply.ok) {\n      fail(reply.error);\n      return;\n    }\n    process.stdout.write(\n      `Connected to ${printable(grant.appName)} as ${printable(grant.account.email ?? grant.account.name)}. Your agents are ready in its sidebar.\\nNot you? Run \\`npx @parlor/agent-host disconnect ${origin}\\`.\\n`,\n    );\n    if (alreadyConnected) {\n      process.stdout.write(\n        \"This computer was already connected. To use your agents from another browser or device, open the Agent sidebar there and link it.\\n\",\n      );\n    }\n  },\n});\n\nconst disconnect = defineCommand({\n  meta: { name: \"disconnect\", description: \"Disconnect this computer from a Parlor app\" },\n  args: { url: { type: \"positional\", required: true, description: \"The app's URL\" } },\n  async run({ args }) {\n    const kit = await host();\n    await kit\n      .disconnectFrom(new URL(args.url).origin)\n      .catch((error: unknown) => fail(errorText(error)));\n  },\n});\n\nconst status = defineCommand({\n  meta: { name: \"status\", description: \"Show the apps this computer serves\" },\n  args: { json: { type: \"boolean\", description: \"Print one JSON line\" } },\n  async run({ args }) {\n    const kit = await host();\n    const client = await kit.connectControl(kit.hostPaths().control);\n    const reply = client ? await client.send({ op: \"status\" }) : undefined;\n    client?.close();\n    const current = reply?.ok\n      ? { ...reply.status, grants: reply.grants }\n      : ({ state: \"stopped\" } as const);\n    if (args.json) {\n      process.stdout.write(`${JSON.stringify(current)}\\n`);\n    } else if (current.state === \"stopped\") {\n      process.stdout.write(\"Parlor Host is not running.\\n\");\n    } else {\n      const apps = current.apps.map((app) => `  ${app}`).join(\"\\n\");\n      process.stdout.write(\n        `Parlor Host ${current.version} is serving:\\n${apps || \"  no app yet\"}\\n`,\n      );\n    }\n  },\n});\n\nconst daemon = defineCommand({\n  meta: {\n    name: \"daemon\",\n    description: \"Run the background host for every connected app\",\n  },\n  args: {\n    ensure: {\n      type: \"boolean\",\n      description:\n        \"Adopt, install or upgrade the per-user service, print one JSON line, exit\",\n    },\n    app: { type: \"string\", description: \"With --ensure: the app's bundle id\" },\n    binary: { type: \"string\", description: \"With --ensure: the bundled parlor-host\" },\n    signature: { type: \"string\", description: \"With --ensure: its parlor-host.sig\" },\n  },\n  async run({ args }) {\n    const kit = await host();\n    const paths = kit.hostPaths();\n    if (args.ensure) {\n      if (!args.app || !args.binary || !args.signature) {\n        fail(\"--ensure needs --app, --binary and --signature.\");\n        return;\n      }\n      const started = performance.now();\n      const outcome = await kit.ensureService(paths, {\n        kind: \"desktop-sidecar\",\n        app: args.app,\n        release: kit.release,\n        binary: args.binary,\n        signature: args.signature,\n      });\n      process.stdout.write(\n        `${JSON.stringify({\n          event: \"ensure\",\n          outcome: outcome.kind,\n          ms: Math.round(performance.now() - started),\n          ...(outcome.kind === \"refused\" ? { reason: outcome.reason } : {}),\n        })}\\n`,\n      );\n      return;\n    }\n    const shutdown = shutdownSignal();\n    const running = kit.daemonFor(\n      paths,\n      kit.fileGrantStore(paths.grants),\n      process.platform === \"darwin\" ? kit.macDialogPrompter() : kit.terminalPrompter(),\n    );\n    try {\n      await running.start();\n    } catch (error) {\n      if (error instanceof kit.HostAlreadyRunning) process.exit(0);\n      throw error;\n    }\n    const handedOver = running.drained.then(() => true);\n    if (await Promise.race([handedOver, untilAborted(shutdown).then(() => false)])) {\n      process.exit(0);\n    }\n    await running.stop();\n    process.exit(0);\n  },\n});\n\nconst config = defineCommand({\n  meta: {\n    name: \"config\",\n    description: \"Show or set what this computer enforces on remote turns\",\n  },\n  args: {\n    answers: {\n      type: \"string\",\n      description:\n        \"Where an agent's permission prompts are answered: presence or computer\",\n    },\n    \"prompt-presence\": {\n      type: \"string\",\n      description:\n        \"Hours a linked device sends before it confirms with Face ID or Touch ID again, or off\",\n    },\n  },\n  async run({ args }) {\n    const kit = await host();\n    const { policy } = kit.hostPaths();\n    let change: Partial<RemotePolicy> = {};\n    const { answers } = args;\n    if (answers !== undefined) {\n      if (answers !== \"presence\" && answers !== \"computer\") {\n        fail(\"--answers takes presence or computer.\");\n        return;\n      }\n      change = { ...change, answers };\n    }\n    const hours = args[\"prompt-presence\"];\n    if (hours !== undefined) {\n      const maxAgeHours = Number(hours);\n      if (hours !== \"off\" && !(Number.isFinite(maxAgeHours) && maxAgeHours > 0)) {\n        fail(\"--prompt-presence takes a number of hours or off.\");\n        return;\n      }\n      change = { ...change, promptPresence: hours === \"off\" ? \"off\" : { maxAgeHours } };\n    }\n    const current =\n      Object.keys(change).length === 0\n        ? await kit.loadPolicy(policy, kit.DEFAULT_POLICY)\n        : await kit.changePolicy(policy, kit.DEFAULT_POLICY, change);\n    process.stdout.write(`${JSON.stringify(current)}\\n`);\n  },\n});\n\nconst dev = defineCommand({\n  meta: { name: \"dev\", description: \"Serve a local `parlor dev` server\" },\n  args: {\n    app: { type: \"string\", required: true, description: \"http://localhost:<port>\" },\n  },\n  async run({ args }) {\n    const [kit, { NoDevAuth, requestDevHostToken }] = await Promise.all([\n      host(),\n      import(\"./dev-host.js\"),\n    ]);\n    const origin = new URL(args.app).origin;\n    const shutdown = shutdownSignal();\n    const stopped = untilAborted(shutdown);\n    let hostToken: string;\n    try {\n      hostToken = await requestDevHostToken(origin, shutdown);\n    } catch (error) {\n      if (shutdown.aborted) process.exit();\n      if (!(error instanceof NoDevAuth)) throw error;\n      process.stdout.write(\n        \"Parlor Host: this app signs people in itself; connect this computer from its sidebar.\\n\",\n      );\n      return;\n    }\n    const home = kit.hostPaths();\n    const shared = await kit.connectControl(home.control);\n    if (shared) {\n      const reply = await shared.send({ op: \"dev_attach\", appOrigin: origin, hostToken });\n      if (!reply.ok) fail(reply.error);\n      await stopped;\n      await shared.send({ op: \"dev_detach\", appOrigin: origin });\n      shared.close();\n      process.exit();\n    }\n    const root = await mkdtemp(join(tmpdir(), \"parlor-host-dev-\"));\n    const paths = {\n      ...kit.hostPaths(root),\n      agents: home.agents,\n      workspaces: home.workspaces,\n    };\n    const own = kit.daemonFor(paths, memoryGrants(), kit.terminalPrompter());\n    await own.start();\n    const client = await kit.connectControl(paths.control);\n    const reply = await client!.send({ op: \"dev_attach\", appOrigin: origin, hostToken });\n    client!.close();\n    if (!reply.ok) fail(reply.error);\n    await stopped;\n    await own.stop();\n    await rm(root, { recursive: true, force: true });\n    process.exit();\n  },\n});\n\nfunction memoryGrants(): GrantStore {\n  const grants = new Map<string, AppGrant>();\n  return {\n    list: async () => [...grants.values()],\n    get: async (appOrigin) => grants.get(appOrigin),\n    save: async (grant) => void grants.set(grant.appOrigin, grant),\n    remove: async (appOrigin) => void grants.delete(appOrigin),\n  };\n}\n\nconst mcpProxy = defineCommand({\n  meta: { name: \"mcp-proxy\", description: \"Internal: an agent's stdio MCP server\" },\n  async run() {\n    const { runMcpProxyProcess } = await import(\"./mcp-proxy.js\");\n    await runMcpProxyProcess(process.env);\n  },\n});\n\nvoid runMain(\n  defineCommand({\n    meta: {\n      name: \"parlor-host\",\n      version,\n      description: \"Run your own agents for your Parlor apps\",\n    },\n    subCommands: {\n      connect,\n      link,\n      devices,\n      disconnect,\n      status,\n      daemon,\n      config,\n      dev,\n      \"mcp-proxy\": mcpProxy,\n    },\n  }),\n);\n"]}

package/dist/mcp-proxy.d.ts

@@ -0,0 +1,33 @@
+import type { Delegation } from "@parlor/server";
+import type { StdioMcpServer } from "./acp.js";
+/**
+ * The agent's MCP server for an app is this host: a stdio server (`parlor-host
+ * mcp-proxy`) that connects back to the daemon's 0600 socket and names its session by a
+ * nonce. The daemon forwards each message to `<app>/_parlor/mcp` with the current turn's
+ * token, so no app credential is ever in the agent's config, logs or environment.
+ */
+export interface McpProxy {
+    listen(socketPath: string): Promise<void>;
+    open(appServer: string, appOrigin: string): ProxySession;
+    stopListening(): Promise<void>;
+    close(): Promise<void>;
+}
+export interface ProxySession {
+    readonly nonce: string;
+    /** The entry for `session/new`. */
+    readonly server: StdioMcpServer;
+    /** Forward with this token until `end`; a `tools/call` outside a turn gets NO_TURN_MESSAGE. */
+    begin(token: Delegation): void;
+    renew(token: Delegation): void;
+    end(): void;
+    dispose(): void;
+}
+export declare const NO_TURN_MESSAGE = "No turn is active: the user has not asked anything right now. Wait for their next message.";
+export declare const DISCONNECTED_MESSAGE = "This computer no longer serves the app: it was disconnected, or Parlor Host stopped.";
+export declare function createMcpProxy(hostBinary: string): McpProxy;
+/**
+ * `parlor-host mcp-proxy`: stdio to the daemon socket and back. Once the daemon hangs up,
+ * every request still unanswered, and every later one, is answered with an error here.
+ */
+export declare function runMcpProxyProcess(env: NodeJS.ProcessEnv): Promise<void>;
+//# sourceMappingURL=mcp-proxy.d.ts.map

package/dist/mcp-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy.d.ts","sourceRoot":"","sources":["../src/mcp-proxy.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAI/C;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,CAAC;IACzD,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,+FAA+F;IAC/F,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,GAAG,IAAI,IAAI,CAAC;IACZ,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,eAAO,MAAM,eAAe,+FACkE,CAAC;AAE/F,eAAO,MAAM,oBAAoB,yFACuD,CAAC;AA6LzF,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAiG3D;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC9E"}